Scammer in the name of BOSE

Toptarget

Hi,

A scammer created a domain: bose-tech.com and email address: marketing.director@bose-tech.com.
He sends online marketing proposals for agencies and after that he send an email with bose marketing materials with trojan.
I think that 2 of the files are infected, but Bitdefender found trojan only in 1 file.
The other file is almost 1GB with xlsx.scr file extension so it's suspicious.
What do you think about it?

Alexandru_BD

Hello @Toptarget,

Well, I think the first step in this scenario would be to report that fake domain as fraudulent. Perhaps you could submit the domain as a phishing/scam website using Google Safe Browsing Report, for example.
Then mark emails from "marketing.director@bose-tech.com" as spam in your email client. This will help your provider recognize and block similar emails. If you are using a supported mail client – Outlook or Thunderbird, you can also make good use of Bitdefender's Antispam feature:

https://www.bitdefender.com/consumer/support/answer/2158/

Next, I think it's common sense to notify people about this scam to prevent accidental interactions with the emails.
If you are receiving these communications in a business environment, notify your organization and colleagues, and warn your clients or partners who might also receive similar emails.
And perhaps one of the most efficient ways to tackle this is to alert Bose Corporation about the fraudulent domain and email impersonating their brand. They can take legal action and potentially have the domain taken down, if it's fake, that would be the right thing to do.
And this goes without saying, DO NOT download any attachments from those emails, instead report/block/delete.

Last but not least, thank you for sharing your findings with the community. It helps us raise awareness about these scams.

I hope this helps.

Regards,

Alex